The Internet of Things (IoT) refers to the millions of devices around the world that are connected to the Internet. Insecure IoT devices designed without proper security features are the targets of many Internet threats. The rapid integration of the Internet into the IoT infrastructure in various areas of human activity, including vulnerable critical infrastructure, makes the detection of malware in the Internet of Things increasingly important. Annual reports from IoT infrastructure cybersecurity companies and antivirus software vendors show an increase in malware attacks targeting IoT infrastructure. This demonstrates the failure of modern methods for detecting malware on the Internet of things. This is why there is an urgent need for new approaches to IoT malware detection and to protect IoT devices from IoT malware attacks. The subject of the research is the malware detection process on the Internet of Things. This study aims to develop a technique for malware detection based on the control flow graph analysis. Results. This paper presents a new approach for IoT malware detection based on control flow graph analysis. Control flow graphs were built for suspicious IoT applications. The control flow graph is represented as a directed graph, which contains information about the components of the suspicious program and the transitions between them. Based on the control flow graph, metrics can be extracted that describe the structure of the program. Considering that IoT applications are small due to the simplicity and limitations of the IoT operating system environment, malware detection based on control flow graph analysis seems to be possible in the IoT environment. To analyze the behavior of the IoT application for each control flow graph, the action graph is to be built. It shows an abstract graph and a description of the program. Based on the action graph for each IoT application, a sequence is formed. This allows for defining the program’s behavior. Thus, with the aim of IoT malware detection, two malware detection models based on control flow graph metrics and the action sequences are used. Since the approach allows you to analyze both the overall structure and behavior of each application, it allows you to achieve high malware detection accuracy. The proposed approach allows the detection of unknown IoT malware, which are the modified versions of known IoT malware. As the mean of conclusion-making concerning the malware presence, the set of machine learning classifiers was employed. The experimental results demonstrated the high accuracy of IoT malware detection. Conclusions. A new technique for IoT malware detection based on control flow graph analysis has been developed. It can detect IoT malware with high efficiency.

Industrial networks are currently the only communication means designed for real-time systems used in industry. Networked control systems (NCS) are still important and commonly used type of such systems operating on shop floor. As a computerized node of NCS, a programmable logic controller (PLC) is usually used. In most cases, contemporary devices of such kind are equipped with more than one network interface of various types. Typically, only one interface is activated in NCS. Sometimes, the other is used for communication between NCS and supervisory systems. Occasionally, it is additionally involved in the data transmission in the factory IT systems. In general, however, using a single network interface is a more common solution. In this paper, the mutual utilization of more than one interface is discussed in order to back up the NCS network and to manage the node-related traffic within the scope of higher level services. The question of dependability of such a system from the electromagnetic compatibility point of view is discussed. The example is provided based on Profinet via wired and wireless connection.

This paper presents an approach to enhancing the security of Supervisory Control and Data Acquisition (SCADA) systems through the development of Explainable Intrusion Detection Systems (X-IDS). SCADA systems play a crucial role in managing industrial processes and critical infrastructure, yet they are increasingly targeted by cyberattacks, posing significant risks to operational integrity. Leveraging Machine Learning (ML) techniques, particularly focused on network protocols involved in communication with SCADA HMI, this study proposes a protocol-based layered IDS framework to mitigate potential threats. Evaluation of the proposed models demonstrates promising results, achieving high accuracy rates surpassing previous studies. The performance metrics, including accuracy, precision, recall, and F1 scores, along with Brier scores, are comprehensively analyzed to gauge the effectiveness of the models. Additionally, Explainable Machine Learning (XAI) techniques such as SHAP values provide transparent insights into the model's decision-making process. The study highlights the importance of securing HMIs within SCADA systems and offers valuable insights for future research directions in enhancing overall network security.